The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes subprocess.run to execute standard system utilities, including git for content comparison and soffice (LibreOffice) for document validation and conversion. These calls are implemented using list-based arguments and hardcoded command paths, which follow security best practices.
[EXTERNAL_DOWNLOADS]: The documentation specifies several necessary system and library dependencies, such as pandoc, libreoffice, and the docx Node.js package, which are required for the skill's document manipulation features.
[SAFE]: The skill consistently uses the defusedxml library in scripts like ooxml/scripts/unpack.py and ooxml/scripts/pack.py to securely parse XML content, effectively protecting against XML External Entity (XXE) and recursion attacks when processing user-supplied documents.

docx